friendica-github/mod/follow.php

<?php
/**
 * @file mod/follow.php
 */
use Friendica\App;
use Friendica\Core\Protocol;
use Friendica\Core\Renderer;
use Friendica\DI;
use Friendica\Model\Contact;
use Friendica\Model\Profile;
use Friendica\Model\Item;
use Friendica\Network\Probe;
use Friendica\Database\DBA;
use Friendica\Util\Strings;

function follow_post(App $a)
{
	if (!local_user()) {
		throw new \Friendica\Network\HTTPException\ForbiddenException(DI::l10n()->t('Access denied.'));
	}

	if (isset($_REQUEST['cancel'])) {
		DI::baseUrl()->redirect('contact');
	}

	$uid = local_user();
	$url = Strings::escapeTags(trim($_REQUEST['url']));
	$return_path = 'follow?url=' . urlencode($url);

	// Makes the connection request for friendica contacts easier
	// This is just a precaution if maybe this page is called somewhere directly via POST
	$_SESSION['fastlane'] = $url;

	$result = Contact::createFromProbe($uid, $url, true);

	if ($result['success'] == false) {
		// Possibly it is a remote item and not an account
		follow_remote_item($url);

		if ($result['message']) {
			notice($result['message']);
		}
		DI::baseUrl()->redirect($return_path);
	} elseif ($result['cid']) {
		DI::baseUrl()->redirect('contact/' . $result['cid']);
	}

	info(DI::l10n()->t('The contact could not be added.'));

	DI::baseUrl()->redirect($return_path);
	// NOTREACHED
}

function follow_content(App $a)
{
	$return_path = 'contact';

	if (!local_user()) {
		notice(DI::l10n()->t('Permission denied.'));
		DI::baseUrl()->redirect($return_path);
		// NOTREACHED
	}

	$uid = local_user();

	// Issue 4815: Silently removing a prefixing @
	$url = ltrim(Strings::escapeTags(trim($_REQUEST['url'] ?? '')), '@!');

	// Issue 6874: Allow remote following from Peertube
	if (strpos($url, 'acct:') === 0) {
		$url = str_replace('acct:', '', $url);
	}

	if (!$url) {
		DI::baseUrl()->redirect($return_path);
	}

	$submit = DI::l10n()->t('Submit Request');

	// Don't try to add a pending contact
	$r = q("SELECT `pending` FROM `contact` WHERE `uid` = %d AND ((`rel` != %d) OR (`network` = '%s')) AND
		(`nurl` = '%s' OR `alias` = '%s' OR `alias` = '%s') AND
		`network` != '%s' LIMIT 1",
		intval(local_user()), DBA::escape(Contact::FOLLOWER), DBA::escape(Protocol::DFRN), DBA::escape(Strings::normaliseLink($url)),
		DBA::escape(Strings::normaliseLink($url)), DBA::escape($url), DBA::escape(Protocol::STATUSNET));

	if ($r) {
		if ($r[0]['pending']) {
			notice(DI::l10n()->t('You already added this contact.'));
			$submit = '';
			//$a->internalRedirect($_SESSION['return_path']);
			// NOTREACHED
		}
	}

	$ret = Probe::uri($url);

	$protocol = Contact::getProtocol($ret['url'], $ret['network']);

	if (($protocol == Protocol::DIASPORA) && !DI::config()->get('system', 'diaspora_enabled')) {
		notice(DI::l10n()->t("Diaspora support isn't enabled. Contact can't be added."));
		$submit = '';
		//$a->internalRedirect($_SESSION['return_path']);
		// NOTREACHED
	}

	if (($protocol == Protocol::OSTATUS) && DI::config()->get('system', 'ostatus_disabled')) {
		notice(DI::l10n()->t("OStatus support is disabled. Contact can't be added."));
		$submit = '';
		//$a->internalRedirect($_SESSION['return_path']);
		// NOTREACHED
	}

	if ($protocol == Protocol::PHANTOM) {
		// Possibly it is a remote item and not an account
		follow_remote_item($url);

		notice(DI::l10n()->t("The network type couldn't be detected. Contact can't be added."));
		$submit = '';
		//$a->internalRedirect($_SESSION['return_path']);
		// NOTREACHED
	}

	if ($protocol == Protocol::MAIL) {
		$ret['url'] = $ret['addr'];
	}

	if (($protocol === Protocol::DFRN) && !DBA::isResult($r)) {
		$request = $ret['request'];
		$tpl = Renderer::getMarkupTemplate('dfrn_request.tpl');
	} else {
		$request = DI::baseUrl() . '/follow';
		$tpl = Renderer::getMarkupTemplate('auto_request.tpl');
	}

	$r = q("SELECT `url` FROM `contact` WHERE `uid` = %d AND `self` LIMIT 1", intval($uid));

	if (!$r) {
		notice(DI::l10n()->t('Permission denied.'));
		DI::baseUrl()->redirect($return_path);
		// NOTREACHED
	}

	$myaddr = $r[0]['url'];
	$gcontact_id = 0;

	// Makes the connection request for friendica contacts easier
	$_SESSION['fastlane'] = $ret['url'];

	$r = q("SELECT `id`, `location`, `about`, `keywords` FROM `gcontact` WHERE `nurl` = '%s'",
		Strings::normaliseLink($ret['url']));

	if (!$r) {
		$r = [['location' => '', 'about' => '', 'keywords' => '']];
	} else {
		$gcontact_id = $r[0]['id'];
	}

	if ($protocol === Protocol::DIASPORA) {
		$r[0]['location'] = '';
		$r[0]['about'] = '';
	}

	$o = Renderer::replaceMacros($tpl, [
		'$header'        => DI::l10n()->t('Connect/Follow'),
		'$desc'          => '',
		'$pls_answer'    => DI::l10n()->t('Please answer the following:'),
		'$does_know_you' => ['knowyou', DI::l10n()->t('Does %s know you?', $ret['name']), false, '', [DI::l10n()->t('No'), DI::l10n()->t('Yes')]],
		'$add_note'      => DI::l10n()->t('Add a personal note:'),
		'$page_desc'     => '',
		'$friendica'     => '',
		'$statusnet'     => '',
		'$diaspora'      => '',
		'$diasnote'      => '',
		'$your_address'  => DI::l10n()->t('Your Identity Address:'),
		'$invite_desc'   => '',
		'$emailnet'      => '',
		'$submit'        => $submit,
		'$cancel'        => DI::l10n()->t('Cancel'),
		'$nickname'      => '',
		'$name'          => $ret['name'],
		'$url'           => $ret['url'],
		'$zrl'           => Profile::zrl($ret['url']),
		'$url_label'     => DI::l10n()->t('Profile URL'),
		'$myaddr'        => $myaddr,
		'$request'       => $request,
		'$keywords'      => $r[0]['keywords'],
		'$keywords_label'=> DI::l10n()->t('Tags:')
	]);

	DI::page()['aside'] = '';

	$profiledata = Contact::getDetailsByURL($ret['url']);
	if ($profiledata) {
		Profile::load($a, '', $profiledata, false);
	}

	if ($gcontact_id <> 0) {
		$o .= Renderer::replaceMacros(Renderer::getMarkupTemplate('section_title.tpl'),
			['$title' => DI::l10n()->t('Status Messages and Posts')]
		);

		// Show last public posts
		$o .= Contact::getPostsFromUrl($ret['url']);
	}

	return $o;
}

function follow_remote_item($url)
{
	$item_id = Item::fetchByLink($url, local_user());
	if (!$item_id) {
		// If the user-specific search failed, we search and probe a public post
		$item_id = Item::fetchByLink($url);
	}

	if (!empty($item_id)) {
		$item = Item::selectFirst(['guid'], ['id' => $item_id]);
		if (DBA::isResult($item)) {
			DI::baseUrl()->redirect('display/' . $item['guid']);
		}
	}
}